Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e539d1c5-fb15-3b1e-9282-3649e5739c28.roa
File:                     e539d1c5-fb15-3b1e-9282-3649e5739c28.roa (raw, json)
Hash identifier:          6aOPIxYBMzJNT4E8s3BLVZ7tgvet4olZsvCl4MWCj+I=
Subject key identifier:   E8:F4:6C:F7:4D:33:1B:E3:C5:B5:7C:C6:D4:46:F6:49:0B:70:EC:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC4830B91091E49E7466E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e539d1c5-fb15-3b1e-9282-3649e5739c28.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396564
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:83:0b:91:09:1e:49:e7:46:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=4c18b0db-72ed-4eca-a743-7dda0934a578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:1f:9b:22:ce:8e:f8:de:14:65:51:75:4b:
                    a3:b2:96:ea:f6:9c:29:f8:f5:4a:13:c1:1f:cc:ef:
                    de:05:ce:34:4d:64:20:0f:17:cf:6a:27:80:f1:61:
                    c6:c9:33:67:d0:e0:c0:91:a6:5b:3e:4d:fd:5c:85:
                    45:b2:8d:93:67:e8:0d:e1:ec:74:3e:9c:79:55:94:
                    18:9e:52:66:2d:ab:42:4c:97:53:41:51:01:d2:f7:
                    90:7d:8b:00:b5:9c:fc:6f:ab:e1:f2:4f:93:72:16:
                    17:f9:6d:a7:c9:26:08:f3:be:fc:f0:48:11:a2:ae:
                    91:c5:7b:49:d3:bd:1e:33:c6:a9:cc:2f:1d:f6:a6:
                    7e:39:67:67:d1:93:1b:c7:d1:e8:6e:aa:23:8e:b4:
                    77:77:a5:25:27:72:3a:8c:9a:f6:a1:4b:97:c2:ea:
                    06:b9:1f:83:b2:da:60:aa:2d:fc:53:95:ec:df:ca:
                    4e:07:01:ad:71:85:7e:6f:46:60:3a:28:c1:13:4f:
                    f3:3f:29:c0:5f:9b:78:90:fb:ed:f5:e1:69:2a:2d:
                    94:0d:18:25:ca:e6:ef:16:63:f5:01:26:6b:28:d4:
                    62:68:31:f3:f9:80:41:61:91:dc:c4:80:5b:43:15:
                    f8:86:50:88:de:af:52:d4:0f:ff:5f:d4:ba:87:fb:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:6C:F7:4D:33:1B:E3:C5:B5:7C:C6:D4:46:F6:49:0B:70:EC:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e539d1c5-fb15-3b1e-9282-3649e5739c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:90:41:e5:01:7b:6c:59:8e:70:59:81:29:0c:60:af:d2:60:
         eb:d4:6a:bc:72:d6:b4:0a:56:90:86:90:ce:57:f6:37:0c:6f:
         0e:0b:59:54:49:b2:24:cb:f3:8c:87:a7:12:c7:7c:db:6b:8b:
         0f:03:0f:19:ca:4f:47:c1:d3:e7:f0:eb:df:8e:b9:ca:6e:49:
         2a:9e:ac:52:b5:60:8c:fa:c5:ac:25:f3:8a:e2:d2:c5:27:df:
         92:e3:7f:b3:34:8e:a2:f7:51:f5:73:4c:a1:e5:c4:2a:db:2b:
         64:61:24:73:9a:73:d7:f1:f7:1e:b4:1a:ed:02:d1:8b:b3:10:
         be:53:e1:20:f9:dc:29:d4:53:eb:eb:f6:40:6a:03:f3:53:d7:
         23:75:59:89:2d:d4:83:b8:05:80:62:4d:ef:1b:d3:f8:df:31:
         8c:70:78:7d:86:9c:3b:2e:27:c2:aa:eb:6a:bd:83:07:30:29:
         a5:42:87:48:97:59:cd:4a:5a:db:8e:89:ef:94:e9:d8:b2:f8:
         56:e7:47:2c:6b:71:94:f9:f2:83:e1:2a:ec:7c:a3:b1:93:56:
         04:73:1d:81:b1:97:2d:8b:19:38:fc:d0:6f:50:6c:29:6f:2e:
         c1:6a:cf:99:a0:69:b1:e2:69:e1:5a:ba:1e:6b:1d:41:d0:a0:
         53:b0:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:40:10 2026 by rpki-client